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AMENDMENTS TO THE CLAIMS 

1. (Original) A computer-implemented method for using predefined parsing 
information to analyze web site navigation data in order to identify occurrences of defined 
types of events, the method comprising: 

for each of multiple distinct web sites each having multiple web pages, 

receiving web site navigation data associated with the web site that 
has multiple entries each containing information related to an occurrence of a request for a 
web page of the web site and of a response from a web site server for the web site; 

retrieving predefined parsing information associated with the web site 
that includes multiple distinct definitions of logical sites and multiple distinct definitions of 
event types, each of the logical site definitions specifying an IP address and port number 
used by a web site server to provide at least some of the web pages of the web site, each 
of the event type definitions specifying a type of request for a web page of the web site and 
specifying one of the logical sites; 

for each entry of the received web site navigation data, 

analyzing the information contained in the entry to determine if 
the web site server that performed the related response matches any of the defined logical 
sites by having used the IP address and the port number specified by that logical site; and 

if a logical site is determined to match the web site server, 
further analyzing the information contained in the entry by, for each of the event types 
whose definition specifies the matching logical site, when the information contained in the 
entry indicates that the related request is of the type specified by the event type, storing an 
indication of an occurrence for the web site of a request of the type specified by that event 
type such that the stored indication includes information from the entry; 

receiving a request from an operator of the web site to provide 
information for the web site about occurrences of specified event types; 
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retrieving in response the stored indications of occurrences related to 
the specified event types for the web site; and 

providing the retrieved information to the operator, 
so that the operators of the multiple web sites can receive information about occurrences 
of interest for their web sites. 

2. (Original) The method of claim 1 wherein the information contained in each 
of the web site navigation data entries includes a URL path from the related request and at 
least some of the entries include a query string from that request, wherein the specification 
of a type of request for each of the event type definitions includes a URL pattern capable of 
matching URL paths of multiple web pages that are related to that type of request and 
includes a query string pattern capable of matching at least one query string related to that 
type of request, and wherein a related request for an entry is determined to be of the type 
specified by an event type when the URL path for that request and any query string for that 
request match the URL pattern and the query string pattern included in the definition of the 
event type. 

3. (Original) The method of claim 2 wherein the query string patterns each 
include at least one query string parameter name, and wherein the information from an 
entry that is included with the stored indication of an occurrence of an event type includes 
a value from the related request query string for each query string parameter name in the 
query string pattern for the event type. 

4. (Original) The method of claim 2 wherein at least some of the event type 
definitions include multiple event definition patterns that each include a URL pattern and a 
query string pattern, and wherein a related request is determined to be of the type 
specified by an event type when the URL path for that request and any query string for that 
request match the URL pattern and the query string pattern of any of the event definition 
patterns of the event type. 
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5. (Original) The method of claim 1 wherein the receiving of the web site 
navigation data associated with a web site includes retrieving at least one log file from at 
least one web site server for the web site, the retrieved log files containing the web site 
navigation data. 

6. (Original) The method of claim 1 wherein the predefined parsing information 
associated with one of the web sites further includes at least one exclusion definition 
specifying a type of request or response, and wherein the analyzing of the information 
contained in an entry of the web site navigation data associated with that web site is not 
performed if the related request or response for the entry is of a type that matches one of 
the exclusion definitions. 

7. (Original) The method of claim 1 including, before the receiving of the web 
site navigation data for a web site, generating the parsing information associated with the 
web site based at least in part on the web site servers that can provide web pages of the 
web site and on types of requests for web pages that those web site servers can receive. 

8. (Original) The method of claim 1 wherein the received request from an 
operator of one of the web sites further specifies effective dates such that the information 
to be provided is for occurrences of the specified event types that took place during the 
effective dates, and wherein the stored indications that are retrieved in response are for 
those occurrences. 

9. (Original) The method of claim 1 wherein the operator of one of the web 
sites from whom a request is received is at a remote location, and wherein the providing of 
the retrieved information to the operator includes generating a report that includes the 
retrieved information and sending the generated report to the remote location for 
presentation to the operator. 
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10. (Original) The method of claim 1 wherein the operators of the multiple web 
sites are customers, and wherein the analyzing of the web site navigation data entries for 
the web sites is performed as a service for the customers. 

1 1 . (Original) A computer-implemented method for analyzing interaction data to 
identify occurrences of defined types of events, the method comprising: 

receiving an indication of interaction data that is associated with a content set 
and that has at least one entry, each entry related to an interaction with the content set; 

receiving an indication of at least one communication definition that specifies 
a manner of communicating content set interactions; 

receiving an indication of multiple event type definitions each specifying a 
type of interaction with the content set and each associated with one of the communication 
definitions; and 

for each entry of the interaction data, 

determining whether the entry matches one of the event type 
definitions in such a manner that the related interaction for the entry is of the type specified 
by that event type definition and was communicated in the manner specified by the 
communication definition associated with that event type definition; and 

when it is determined that the entry matches one of the event type 
definitions, storing an indication of an occurrence of that event type. 

12. (Original) The method of claim 1 1 wherein the content set is a web site with 
multiple web pages. 

13. (Original) The method of claim 11 wherein the content set is a group of 
multiple related web pages that are a subset of web pages of a web site. 

14. (Original) The method of claim 1 1 wherein the content set is multiple related 
web sites each having multiple web pages. 
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15. (Original) The method of claim 11 wherein the content set is a group of 
related items. 

16. (Original) The method of claim 11 wherein the content set is a service 
providing multiple features. 

17. (Original) The method of claim 11 wherein the content set is an executing 
program providing various functionalities. 

18. (Original) The method of claim 1 1 wherein each of the interactions related to 
the interaction data entries includes specifying a Uniform Resource Indicator. 

19. (Original) The method of claim 11 wherein each of the interactions related to 
the interaction data entries includes requesting that functionality be provided. 

20. (Original) The method of claim 1 1 wherein each of the interactions related to 
the interaction data entries includes supplying information. 

21. (Original) The method of claim 11 wherein the manner of communicating 
content set interactions specified by each of the communication definitions includes using 
a specified IP address and port number to communicate information related to an 
interaction. 

22. (Original) The method of claim 11 wherein the manner of communicating 
content set interactions specified by each of the communication definitions includes using 
a specified domain name to communicate information related to an interaction. 

23. (Original) The method of claim 11 wherein the manner of communicating 
content set interactions specified by each of the communication definitions includes using 
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a specified group of communication parameters to communicate information related to an 
interaction. 

24. (Original) The method of claim 1 1 wherein the manner of communicating 
content set interactions specified by each of the communication definitions includes 
identifying a specified portion of the content set to which an interaction is to be 
communicated. 

25. (Original) The method of claim 1 1 wherein the manner of communicating 
content set interactions specified by each of the communication definitions includes 
identifying a specified computing device or computer program provider to which an 
interaction is to be communicated. 

26. (Original) The method of claim 1 1 wherein each of the interactions related to 
the interaction data entries includes specifying a Uniform Resource Indicator, and wherein 
the type of interaction specified by each of the event type definitions includes a pattern 
capable of matching at least one Uniform Resource Indicator. 

27. (Original) The method of claim 1 1 wherein each of the interactions related to 
the interaction data entries includes specifying a URL having a path portion and a query 
string portion, each of the query string portions including one or more combinations each 
having a query parameter name and corresponding query value, and wherein the type of 
interaction specified by each of the event type definitions includes a URL path pattern 
capable of matching one or more URL paths and includes a query string pattern capable of 
matching at least one query string. 

28. (Original) The method of claim 27 wherein the query string patterns each 
indicate one or more query parameter names whose presence in a query string is required, 
allowed, or disallowed if that query string is to match the query string pattern, and wherein 
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the determination of whether a query string portion matches a query string pattern includes 
determining if the query string portion includes each of the query parameter names whose 
presence is indicated in the query string pattern to be required and does not include any of 
the query parameter names whose presence is indicated in the query string pattern to be 
disallowed. 

29. (Original) The method of claim 27 wherein the query string patterns each 
include at least one query string parameter name, and wherein the stored indication of an 
occurrence of an event type when an entry matches the definition for that event type 
includes, for each query string parameter name in the query string pattern for that event 
type definition, a value from the query string portion of the specified URL for that entry that 
corresponds to that query string parameter name. 

30. (Original) The method of claim 29 wherein at least one of the query string 
patterns includes multiple instances of a query string parameter name, and including, when 
an entry matches the definition for the event type that includes that one query string 
pattern in such a manner that the query string portion of the specified URL for that entry 
includes multiple combinations that each have a query string value corresponding to one of 
the instances of the query string parameter name, before the storing of those query string 
values, determining a unique name for each of the multiple instances of the query string 
parameter name so that those corresponding query string values for each of the multiple 
instances of the query string parameter name can be stored distinctly from the 
corresponding query string values for the other instances of the query string parameter 
name. 

31 . (Original) The method of claim 27 wherein at least some of the event type 
definitions include multiple event definition patterns that each include a URL path pattern 
and a query string pattern, and wherein the related interaction for an entry is determined to 
be of the type specified by an event type definition when the path portion and the query 
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string portion of the URL for that entry match the URL path pattern and the query string 
pattern of any of the event definition patterns of that event type. 

32. (Original) The method of claim 27 wherein at least some of the URL path 
patterns include a static portion capable of matching a single corresponding portion of a 
URL path and include a variable portion capable of matching multiple corresponding 
portions of URL paths. 

33. (Original) The method of claim 27 wherein each of the URL path patterns 
can be specified to match any URL path and wherein each of the query string patterns can 
be specified to match any query string. 

34. (Original) The method of claim 11 wherein each of the communication 
definitions can be specified to match any manner of communicating content set 
interactions. 

35. (Original) The method of claim 1 1 wherein each of the event type definitions 
can be specified to match any type of interaction with the content set. 

36. (Original) The method of claim 1 1 wherein at least some of the entries are 
determined to match multiple of the event type definitions. 

37. (Original) The method of claim 11 wherein each of the entries contain 
information related to the interaction for the entry, and wherein the determining that an 
entry matches an event type definition includes analyzing the information contained in the 
entry. 

38. (Original) The method of claim 1 1 including receiving an indication of at least 
one exclusion definition that specifies a type of interaction, and wherein the determining of 
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whether an entry matches one of the event type definitions is not performed if the related 
interaction for the entry is of a type that matches one of the exclusion definitions. 

39. (Original) The method of claim 1 1 including receiving a request to provide 
information about occurrences of specified event types, and providing in response the 
stored indications of occurrences related to the specified event types. 

40. (Original) The method of claim 1 1 wherein the determining of whether the 
interaction data entries match event type definitions is performed as a service for a 
customer. 

41. (Original) A computer-readable medium whose contents cause a computing 
device to analyze data to identify occurrences of defined types of interactions, by 
performing a method comprising: 

receiving an indication of data that is associated with a content set and that 
has at least one entry, each entry related to an interaction with the content set; 

receiving an indication of multiple definitions each specifying a type of 
interaction with the content set and each associated with a portion of the content set; and 

for each entry of the data, 

determining whether the entry matches one of the definitions in such a 
manner that the related interaction for the entry is of the type specified by that definition 
and is with the portion of the content set associated with that definition; and 

when it is determined that the entry matches one of the definitions, 
indicating an occurrence of the type of interaction specified by that definition. 

42. (Original) The computer-readable medium of claim 41 wherein the computer- 
readable medium is a memory of a computer system. 
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43. (Original) The computer-readable medium of claim 41 wherein the computer- 
readable medium is a data transmission medium transmitting a generated data signal 
containing the contents. 

44. (Original) The computer-readable medium of claim 41 wherein the contents 
are instructions that when executed cause the computing device to perform the method. 

45. (Original) A computing device for analyzing interaction data to identify 
occurrences of defined types of events, comprising: 

an interaction data receiver component capable of receiving an indication of 
interaction data that is associated with a content set and that has at least one entry, each 
entry related to an interaction with the content set; 

a definition receiver component capable of receiving an indication of at least 
one communication definition that specifies a manner of communicating content set 
interactions and of receiving an indication of multiple event type definitions each specifying 
a type of interaction with the content set and each associated with one of the 
communication definitions; and 

an interaction data parsing component capable of, for each entry of the 
interaction data, determining whether the entry matches one of the event type definitions in 
such a manner that the related interaction for the entry is of the type specified by that event 
type definition and was communicated in the manner specified by the communication 
definition associated with that event type definition and, when it is determined that the 
entry matches one of the event type definitions, storing an indication of an occurrence of 
that event type. 

46. (Original) The computing device of claim 45 wherein the interaction data 
receiver component, definition receiver component and interaction data parsing component 
are executing in memory of the computing device. 
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47. (Original) A computer system for analyzing interaction data to identify 
occurrences of defined types of events, comprising: 

means for receiving an indication of interaction data that is associated with a 
content set and that has at least one entry, each entry related to an interaction with the 
content set; 

means for receiving an indication of at least one communication definition 
that specifies a manner of communicating content set interactions and for receiving an 
indication of multiple event type definitions each specifying a type of interaction with the 
content set and each associated with one of the communication definitions; and 

means for, for each entry of the interaction data, determining whether the 
entry matches one of the event type definitions in such a manner that the related 
interaction for the entry is of the type specified by that event type definition and was 
communicated in the manner specified by the communication definition associated with 
that event type definition and, when it is determined that the entry matches one of the 
event type definitions, storing an indication of an occurrence of that event type. 

48. (Original) A computer-implemented method for analyzing interaction data for 
a web site to identify occurrences of defined types of events, the method comprising: 

receiving an indication of multiple interaction data entries each containing 
information about an interaction with a web site that includes a specified URL, each of the 
specified URLs optionally including a URL path portion and optionally including a query 
string portion, the contained information for each entry including any URL path portion that 
is included in the specified URL for the entry and including any query string portion that is 
included in the specified URL for the entry; 

receiving an indication of multiple event type definitions that each specify a 
type of interaction, each event type definition having a URL path pattern capable of 
matching at least one URL path related to the interaction type and having a query string 
pattern capable of matching at least one query string related to the interaction type; and 

for each entry, 
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analyzing the entry to determine whether the entry matches one of the 
event type definitions by containing information about an interaction of the type specified 
by that one event type definition, the matching such that the information contained in the 
entry includes a URL path portion that matches the URL path pattern specified in that one 
event type definition and includes a query string portion that matches the query string 
pattern specified in that one event type definition; and 

when it is determined that the entry matches one of the event type 
definitions, storing an indication of an occurrence of that event type for the web site. 

49. (Original) The method of claim 48 wherein the contained information about 
each interaction further includes information related to a manner of identifying a web site 
server with which the interaction occurred, wherein each of the event type definitions is 
associated with a logical site definition that specifies a manner of identifying a web site 
server related to the web site, and wherein the determining that an entry matches an event 
type definition further includes determining that the information included in the entry that is 
related to the manner of identifying the web site server matches the manner of identifying a 
web site server specified by the logical site definition associated with that event type 
definition. 

50. (Original) The method of claim 49 wherein the manner of identifying a web 
site server related to the web site that is specified by each logical site definition includes 
using a specified IP address and port number to communicate with the web site server. 

51 . (Original) The method of claim 49 wherein the manner of identifying a web 
site server related to the web site that is specified by each logical site definition includes 
using a specified group of communication parameters to communicate with the web site 
server. 
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52. (Original) The method of claim 48 wherein each of the interactions with a 
web site that includes a specified URL includes a request for a web page from that web 
site that corresponds to the specified URL. 

53. (Original) The method of claim 48 wherein each of the interactions with a 
web site that includes a specified URL includes a sending to a client of a web page from 
that web site that corresponds to the specified URL. 

54. (Original) The method of claim 48 wherein at least some of the event type 
definitions include multiple event patterns that each specify a distinct combination of a URL 
path pattern capable of matching at least one URL path and a query string pattern capable 
of matching at least one query string, and wherein an entry is determined to match an 
event type definition having multiple event patterns if, for any of the event patterns, the 
information contained in the entry includes a URL path portion that matches the URL path 
pattern specified in that event pattern and includes a query string portion that matches the 
query string pattern specified in that event pattern. 

55. (Original) The method of claim 48 wherein the query string patterns each 
indicate one or more query parameter names whose presence in a query string is required, 
allowed, or disallowed if that query string is to match the query string pattern, and wherein 
the determination of whether a query string portion matches a query string pattern further 
includes determining if the query string portion includes each of the query parameter 
names whose presence is indicated in the query string pattern to be required and does not 
include any of the query parameter names whose presence is indicated in the query string 
pattern to be disallowed. 

56. (Original) The method of claim 48 wherein the query string patterns each 
include at least one query string parameter name, and wherein the stored indication of an 
occurrence of an event type for an entry matching the definition for that event type 
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includes, for each query string parameter name in the query string pattern for that event 
type definition, a value from the query string portion of the specified URL for that entry that 
corresponds to that query string parameter name. 

57. (Original) The method of claim 56 wherein at least one of the query string 
patterns includes multiple instances of a query string parameter name, and including, when 
an entry matches the definition for the event type that includes that one query string 
pattern in such a manner that the query string portion of the specified URL for that entry 
includes multiple combinations that each have a query string value corresponding to one of 
the instances of the query string parameter name, before the storing of those query string 
values, determining a unique name for each of the multiple instances of the query string 
parameter name so that those corresponding query string values for each of the multiple 
instances of the query string parameter name can be stored distinctly from the 
corresponding query string values for the other instances of the query string parameter 
name. 

58. (Original) The method of claim 48 wherein at least some of the URL path 
patterns include a static portion capable of matching a single corresponding portion of a 
URL path and include a variable portion capable of matching multiple corresponding 
portions of URL paths. 

59. (Original) The method of claim 48 wherein each of the URL path patterns 
can be specified to match any URL path and wherein each of the query string patterns can 
be specified to match any query string. 

60. (Original) The method of claim 48 wherein at least some of the entries are 
determined to match multiple of the event type definitions. 
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61 . (Original) The method of claim 48 including receiving an indication of at least 
one exclusion definition that specifies a type of interaction, and wherein the determining of 
whether an entry matches one of the event type definitions is not performed if the 
interaction for the entry is of a type that matches one of the exclusion definitions. 

62. (Original) The method of claim 61 wherein the type of interaction specified 
by each of the exclusion definitions is a request for a file of a specified type. 

63. (Original) The method of claim 61 wherein the type of interaction specified 
by each of the exclusion definitions is a request from a specified client computer. 

64. (Original) The method of claim 61 wherein the type of interaction specified 
by each of the exclusion definitions is a request sent to a specified executable program at 
the web site. 

65. (Original) The method of claim 48 including receiving a request to provide 
information about occurrences of specified event types, and providing in response the 
stored indications of occurrences related to the specified event types. 

66. (Original) A computer-readable medium containing instructions that when 
executed cause a computer system to analyze data for a web site to identify occurrences 
of defined types of interactions related to the web site, by performing a method comprising: 

receiving an indication of multiple data entries each containing information 
about an interaction related to a web site that includes a specified URI, each of the 
specified URIs optionally including a path portion and optionally including a query string 
portion, the contained information for each entry including any path portion that is included 
in the specified URI for the entry and including any query string portion that is included in 
the specified URI for the entry; 
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receiving an indication of multiple definitions that each specify a type of 
interaction, each definition having a path pattern capable of matching at least one URI path 
related to the interaction type and having a query string pattern capable of matching at 
least one query string related to the interaction type; and 

for each entry, 

analyzing the entry to determine whether the entry matches one of the 
definitions by containing information about an interaction of the type specified by that one 
definition, the matching such that the information contained in the entry includes a URI 
path portion that matches the path pattern specified in that one definition and includes a 
query string portion that matches the query string pattern specified in that one definition; 
and 

when it is determined that the entry matches one of the definitions, 
indicating an occurrence of an interaction of the type specified by that one definition. 

67. (Currently Amended) A computing device for analyzing interaction data to 
identify occurrences of defined types of events, comprising: 
one or more input devices: 
one or more microprocessors: 

an interaction data receiver component capable of rec e iv i ng using at least 
one of the input devices to receive a n indication of multiple interaction data entries each 
containing information about an interaction with a web site that includes a specified URL, 
each of the specified URLs optionally including a URL path portion and optionally including 
a query string portion, the contained information for each entry including any URL path 
portion that is included in the specified URL for the entry and including any query string 
portion that is included in the specified URL for the entry; 

a definition receiver component capable of r e c ei v i ng using at least one of the 
input devices to receive an indication of multiple event type definitions that each specify a 
type of interaction, each event type definition having a URL path pattern capable of 
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matching at least one URL path related to the interaction type and having a query string 
pattern capable of matching at least one query string related to the interaction type; and 

an interaction data parsing component capable of, for each entry, analyz i ng 
using at least one of the microprocessors to analyze t he entry to determine whether the 
entry matches one of the event type definitions by containing information about an 
interaction of the type specified by that one event type definition, the matching such that 
the information contained in the entry includes a URL path portion that matches the URL 
path pattern specified in that one event type definition and includes a query string portion 
that matches the query string pattern specified in that one event type definition, and of 
storing an indication of an occurrence of an event type for the web site when it is 
determined that an entry matches the definition for that event type. 

68. (Original) A computer-implemented method for analyzing interaction data for 
a web site to identify occurrences of defined types of events, the method comprising: 

receiving an indication of multiple interaction data entries each containing 
information about a request that specifies a URL corresponding to a web site, each of the 
specified URLs optionally including a URL path portion and optionally including a query 
string portion, each of the query string portions including one or more combinations each 
having a query parameter name and corresponding query value, the contained information 
about each request including any URL path portion that is included in the specified URL for 
the request and including any query string portion that is included in the specified URL for 
the request; 

receiving an indication of multiple event type definitions that each specify a 
type of interaction, each event type definition having a URL path pattern capable of 
matching at least one URL path related to the interaction type and a query string pattern 
capable of matching at least one query string related to the interaction type, each query 
string pattern indicating one or more query parameter names; and 

for each entry, 
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analyzing the entry to determine whether the entry matches one of the 
event type definitions by containing information about an interaction of the type specified 
by that one event type definition, the matching such that the information contained in the 
entry includes a URL path portion that matches the URL path pattern specified in that one 
event type definition and includes a query string portion that matches the query string 
pattern specified in that one event type definition; and 

when it is determined that the entry matches one of the event type 
definitions, for each of the query parameter names that is included in the query string 
portion of the contained information for the entry and that is indicated in the query string 
pattern specified by that one event type definition, storing the query value from the 
contained information that corresponds to the query parameter name. 

69. (Original) The method of claim 68 wherein each of the query string patterns 
additionally indicates a type of value corresponding to at least some of the indicated query 
parameter names, and wherein the determining that an entry matches an event type 
definition further includes determining that, for each of the query parameter names that is 
included in the query string portion of the contained information for the entry and that is 
indicated to have a type of value in the query string pattern specified by that one event 
type definition, the corresponding query value in the query string portion matches the 
indicated value type. 

70. (Original) The method of claim 68 wherein the contained information about 
each request further includes information related to a manner of identifying a web site 
server to which the request was sent, wherein each of the event type definitions is 
associated with a logical site definition that specifies a manner of identifying a web site 
server related to the web site, and wherein the determining that an entry matches an event 
type definition further includes determining that the information included in the entry that is 
related to the manner of identifying the web site server matches the manner of identifying a 
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web site server specified by the logical site definition associated with that event type 
definition. 

71. (Original) The method of claim 68 wherein at least one of the query string 
patterns includes multiple instances of a query string parameter name, and including, when 
an entry matches the definition for the event type that includes that one query string 
pattern in such a manner that the query string portion of the specified URL for that entry 
includes multiple combinations that each have a query string value corresponding to one of 
the instances of the query string parameter name, before the storing of those query string 
values, determining a unique name for each of the multiple instances of the query string 
parameter name so that those corresponding query string values for each of the multiple 
instances of the query string parameter name can be stored distinctly from the 
corresponding query string values for the other instances of the query string parameter 
name. 

72. (Original) A computer-implemented method for analyzing interaction data for 
a web site to identify occurrences of defined types of events, the method comprising: 

receiving an indication of multiple interaction data entries each containing 
information about a request that specifies a URL corresponding to a web site, each of the 
specified URLs optionally including a URL path portion and optionally including a query 
string portion, each of the query string portions including one or more combinations each 
having a query parameter name and corresponding query value, the contained information 
about each request including any URL path portion that is included in the specified URL for 
the request and including any query string portion that is included in the specified URL for 
the request; 

receiving an indication of multiple event type definitions that each specify a 
type of interaction, each event type definition having a URL path pattern capable of 
matching at least one URL path and a query string pattern capable of matching at least 
one query string, each query string pattern indicating one or more query parameter names 



[34281 -8027-US0000/SL05 1 930208. DOC] 



20 



Application No.: 10/005,224 



Docket No.: 34281 8027US 



whose presence in a query string is required, allowed, or disallowed if that query string is 
to match the query string pattern; and 
for each entry, 

analyzing the entry to determine whether the entry matches one of the 
event type definitions by containing information about an interaction of the type specified 
by that one event type definition, the matching such that the information contained in the 
entry 

(a) includes a URL path portion that matches the URL path 
pattern specified in that one event type definition, and 

(b) includes a query string portion that includes each of the 
query parameter names whose presence is indicated in the query string pattern specified 
in that one event type definition to be required, and that does not include any of the query 
parameter names whose presence is indicated in the query string pattern specified in that 
one event type definition to be disallowed; and 

when it is determined that the entry matches one of the event type 
definitions, storing an indication of an occurrence of that one event type for the web site. 

73. (Original) The method of claim 72 wherein the contained information about 
each request further includes information related to a manner of identifying a web site 
server to which the request was sent, wherein each of the event type definitions is 
associated with a logical site definition that specifies a manner of identifying a web site 
server related to the web site, and wherein the determining that an entry matches an event 
type definition further includes determining that the information included in the entry that is 
related to the manner of identifying the web site server matches the manner of identifying a 
web site server specified by the logical site definition associated with that event type 
definition. 
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74. (Original) A computer-implemented method for analyzing interaction data for 
a web site to identify occurrences of defined types of events, the method comprising: 

receiving an indication of multiple interaction data entries each containing 
information about a request that specifies a URL corresponding to a web site, each of the 
specified URLs optionally including a URL path portion and optionally including a query 
string portion, the contained information about each request including any URL path 
portion that is included in the specified URL for the request and including any query string 
portion that is included in the specified URL for the request; 

receiving an indication of multiple event type definitions that each specify a 
type of interaction, each event type definition including multiple event patterns that each 
specify a distinct combination of a URL path pattern capable of matching at least one URL 
path and a query string pattern capable of matching at least one query string; and 

for each entry, 

analyzing the entry to determine whether the entry matches one of the 
event type definitions by containing information about an interaction of the type specified 
by that one event type definition, the matching such that, for at least one of the event 
patterns included in that one event type definition, the information contained in the entry 
includes a URL path portion and a query string portion that match the URL path pattern 
and the query string pattern specified in that event pattern; and 

when it is determined that the entry matches one of the event type 
definitions, storing an indication of an occurrence of that event type for the web site. 

75. (Original) The method of claim 74 wherein the contained information about 
each request further includes information related to a manner of identifying a web site 
server to which the request was sent, wherein each of the event type definitions is 
associated with a logical site definition that specifies a manner of identifying a web site 
server related to the web site, and wherein the determining that an entry matches an event 
type definition further includes determining that the information included in the entry that is 
related to the manner of identifying the web site server matches the manner of identifying a 
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web site server specified by the logical site definition associated with that event type 
definition. 

76. (Original) A computer-implemented method for analyzing interaction data 
related to a requested URL to identify occurrences of defined types of events, the method 
comprising: 

receiving an indication of stored information about a request for a specified 
URL having a URL path portion and a query string portion, the query string portion 
including one or more combinations each having a query parameter name and 
corresponding query value, the stored information including the URL path portion and the 
query string portion; 

receiving an indication of an event type definition that specifies a type of 
interaction and that includes multiple event patterns each specifying a distinct combination 
of a URL path pattern capable of matching at least one URL path and a query string 
pattern capable of matching at least one query string, the query string pattern indicating 
one or more query parameter names whose presence in a query string is required, 
allowed, or disallowed if that query string is to match the query string pattern; 

analyzing the stored information to determine whether the information is 
about an interaction of the type specified by any of the event patterns such that the URL 
path portion matches the URL path pattern specified in that event pattern, such that the 
query string portion includes each of the query parameter names whose presence is 
indicated in the query string pattern specified in that event pattern to be required, and such 
that the query string portion does not include any of the query parameter names whose 
presence is indicated in the query string pattern specified in that event pattern to be 
disallowed; and 

when it is determined that the stored information is about an interaction of the 
type specified by one of the event patterns, for each of the query parameter names that is 
included in the query string portion and that is indicated in the query string pattern 
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specified by that one event pattern, storing the query value that corresponds to the query 
parameter name. 

77. (Original) The method of claim 76 wherein the contained information about 
each request further includes information related to a manner of identifying a web site 
server to which the request was sent, wherein each of the event type definitions is 
associated with a logical site definition that specifies a manner of identifying a web site 
server related to the web site, and wherein the determining that an entry matches an event 
type definition further includes determining that the information included in the entry that is 
related to the manner of identifying the web site server matches the manner of identifying a 
web site server specified by the logical site definition associated with that event type 
definition. 

78. (Original) A computer-implemented method for analyzing usage data to 
identify occurrences of defined types of uses, the method comprising: 

receiving an indication of usage data associated with a provided service or 
an executing computer program, the usage data having multiple entries each related to a 
distinct use of the provided service or executing computer program that includes 
information being communicated; 

receiving an indication of multiple definitions each specifying a type of use 
and each associated with a manner of communicating information to the provided service 
or to the executing computer program; 

for each entry of the usage data, 

determining whether the entry matches one of the definitions such that 
the related use for the entry is of the type specified by that definition and such that the 
information communicated for the related use is communicated in the manner associated 
with that definition; and 

when it is determined that the entry matches one of the definitions, 
storing an indication of an occurrence of the type of use specified by that one definition. 
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79. (Original) A computer-readable medium containing a data structure that 
stores multiple definitions for event types so that occurrences of those event types in 
interaction data for a web site can be identified, the data structure having multiple entries 
each corresponding to an event type definition that specifies a type of interaction, each 
entry storing a URL path pattern capable of matching at least one URL path related to that 
type of interaction and a query string pattern capable of matching at least one query string 
related to that type of interaction, 

such that when analyzing information about an interaction with a web page of 
the web site having a specified URL that optionally includes a URL path portion and 
optionally includes a query string portion, if the web page is determined to be of the type 
specified by an event type definition then an occurrence of that event type is indicated, the 
web page determined to be of the type for an event type definition if the specified URL 
includes a URL path portion that matches the URL path pattern specified for that event 
type definition and includes a query string portion that matches the query string pattern 
specified for that event type definition. 

80. (Original) The computer-readable medium of claim 79 wherein each of the 
entries further includes an indication of a logical site definition that specifies a manner of 
identifying a web site server related to the web site, 

such that, when the information about the interaction further includes 
information related to a manner of identifying a web site server with which the interaction 
occurred, the web page is determined to be of the type specified by an event type 
definition only if the information related to the manner of identifying the web site server 
matches the manner of identifying a web site server specified by the logical site definition 
indicated by that event type definition. 

81. (Original) The computer-readable medium of claim 79 wherein the event 
type definitions corresponding to at least some of the entries each have multiple distinct 
combinations of a URL path pattern and a query string pattern, the entry for each of those 
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event type definitions further storing the multiple combinations of URL path patterns and 
query string patterns of the event patterns for that event type definition, 

such that the web page is determined to be of the type specified by an event 
type definition having multiple combinations if, for any of those combinations, the 
information includes a URL path portion that matches the URL path pattern specified in 
that combination and includes a query string portion that matches the query string pattern 
specified in that combination. 

82. (Original) The computer-readable medium of claim 79 wherein the stored 
query string patterns each indicate one or more query parameter names whose presence 
in a query string is required, allowed, or disallowed if that query string is to match the query 
string pattern, 

such that a query string portion of the information is determined to match the 
query string pattern specified for one of the event type definitions if the query string portion 
includes each of the query parameter names whose presence is indicated in that query 
string pattern to be required and does not include any of the query parameter names 
whose presence is indicated in that query string pattern to be disallowed. 

83. (Original) The computer-readable medium of claim 79 wherein the stored 
URL path patterns each include a static portion capable of matching a single 
corresponding portion of a URL path and include a variable portion capable of matching 
multiple corresponding portions of URL paths. 

84. (Original) The computer-readable medium of claim 79 further containing a 
data structure having multiple entries that each store an exclusion definition that specifies 
a type of interaction, 

such that if the information being analyzed is of a type matching one of the 
exclusion definitions, the information will not be determined to match any of the event type 
definitions. 
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85. (Original) A computer-readable medium containing a data structure storing 
multiple definitions for event types so that occurrences of those event types can be 
identified in interaction data or usage data, the data structure having multiple entries each 
corresponding to an event type definition, each entry specifying a type of interaction and 
including an indication of a communication definition that specifies a manner of 
communicating information related to interactions or uses, 

so that when analyzing data about an interaction or use that indicates a 
manner in which related information was communicated, if the data matches one of the 
event type definitions in such a manner that the interaction or use is of the type specified 
by that event type definition and had related information that was communicated in the 
manner specified by the communication definition indicated by that event type definition, 
an occurrence of that event type can be identified. 

86. (Original) A method for analyzing customer data to identify occurrences of 
defined types of events, the method comprising: 

receiving a request from a customer to analyze interaction or usage data for 
that customer; 

receiving an indication of analysis definitions for the customer that include at 
least one communication definition specifying a manner of communicating information and 
include multiple event type definitions each specifying a type of interaction or use and each 
associated with one of the communication definitions; 

receiving a first set of data for the customer that includes information about at 
least one interaction or use; 

analyzing the received set of data to determine whether the received data 
includes information about any interactions or uses that match one of the event type 
definitions in such a manner that the interaction or use is of the type specified by that event 
type definition and had related information communicated in the manner specified by the 
communication definition associated with that event type definition; and 
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when it is determined that the received data matches one of the event type 
definitions, providing information to the customer about an occurrence of that event type. 

87. (Original) The method of claim 86 wherein sets of data are automatically 
retrieved from the customer and analyzed on a periodic basis. 

88. (Original) The method of claim 86 wherein the providing of the information to 
the customer includes generating reports on a periodic basis and sending the generated 
reports to the customer. 

89. (Original) The method of claim 86 including storing an indication of the 
occurrence of that event type, and wherein the providing of the information to the customer 
includes receiving a request from the customer at a remote location to provide information 
about occurrences of event types and sending the requested information to the remote 
location. 

90. (Original) The method of claim 86 wherein the method is performed for 
multiple customers each having distinct interaction or usage data and having distinct 
analysis definitions. 

91. (Currently Amended) A method for creating definitions of event types for 
analyzing interaction data for a web site to identify occurrences of those defined event 
types, the method comprising: 

receiving an indication of a log file for the web site or of other information 
related to the web site that indicates multiple interactions with a web site server for the web 
site, each indicated interaction having associated information including network address 
information for the web site server and a URL specified as part of the interaction; 
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analyzing the log file or the other information to identify distinct network 
addresses for the web site servers for the web site, and generating a site definition for 
each of the identified network addresses that includes that network address; and 

analyzing the log file or the other information to identify distinct types of 
interactions with the web site of interest, and generating an event type definition for each of 
the identified interaction types r ; 

so that analyzing information about an -a distinguished interaction with the 
web site can be ana l yz e d t o d e t e rm i n e- wh e th e r th e i nformat i on match e s (1) identify one of 
the event type definitions that the information matches in such a manner that the 
distinguished interaction is of the type specified by that -the identified event type definition 
and (2) identify w as with a w e b site serv e r hav i ng a network addross that match e s one of 
the site definitions whose network address matches that of a web site server for the web 
site of the distinguished interaction: and 

outputting an indication that the distinguished interaction matches the 
identified event-type definition and the identified site definition . 

92. (Original) The method of claim 91 wherein the specified URLs each 
optionally include a URL path portion and optionally include a query string portion, and 
wherein the event type definitions are each generated to include a URL path pattern 
capable of matching at least one URL path related to the interaction type and a query 
string pattern capable of matching at least one query string related to the interaction type. 

93. (Original) The method of claim 91 wherein each of the event type definitions 
are further generated to include an indication to one of the generated site definitions, such 
that information about an interaction with the web site is not determined to match one of 
the event type definitions unless the interaction was with the web site server having the 
network address included in the site definition indicated by that one event type definition. 
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94. (Original) The method of claim 91 including analyzing information about an 
interaction with the web site using the generated event type definitions and site definitions. 
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